hMailServer config
See original GitHub issueBeen running some scripts against hMailServer, it would appear that numerous failed login attempts arent caught without a username group
With the provided config, my script can make dozens of login attempts before being caught
Since the username is base64 encoded, and may not always occur in the right order anyways, it may not be useful to try to get that with regex, so I’ve been using the session ID as a username, like so
"SMTPD"\s\d+\s(?<username>[^"]+)\s"(?<timestamp>[^"]+)"[^"]+"(?<ipaddress>[^"]+)"[^"]+"SENT:.+(530|535)
This way every single login attempt is caught, I thought this might have something to do with timestamp format, but I tried changing that to match what I see in logs
yyyy-MM-dd HH:mm:ss.SSS = 2022-04-26 19:33:01.195?
Is this the right way to define the timestamp format?
Also, 334 is part of any login attempt, and shouldn’t be included in the failed regex
Issue Analytics
- State:
- Created a year ago
- Comments:17 (7 by maintainers)
Top Results From Across the Web
Configuration tutorial
Specifying public host name · Start hMailAdmin · In the tree to the left, go to Settings -> Protocols -> SMTP · To...
Read more >Getting Started with hMailServer: Installation and ...
Installing hMailServer · Locate the installation file that you've downloaded and then launch it. · In the License Agreement page, you must accept ......
Read more >How To Setup A Local Email Server Using Hmailserver
Download and install the latest hMailServer with default settings. · Start hmailServer Administrator and connect to the localhost server and enter your password....
Read more >Getting Started with hMailServer
Let's go through the installation wizard next. Double-click on the downloaded file to start the Setup program. ... Click Next and then choose...
Read more >hMailServer Setup
Install hMailServer · hMailServer requires . · Locate the hMailServer installer and open it. · Click Next on the Welcome page. · Accept...
Read more >Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start FreeTop Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Top GitHub Comments
Can you send your logfile to support@ipban.com, I’d like to see why the regex is missing on some of the failed logins still…?
I updated the recipe